Fix CI compile errors for v12.9.2-3938-pre release

Rename Network.applyWebSocketTransport instance method to
updateWebSocketTransportSettings to avoid recursive resolution with the
global applyWebSocketTransport helper. Wrap MTProxyConnectivity ping
tokens in ActionDisposable for ManagedProxyFailover. Expand CHANGELOG
3938-pre with full censorship network stack notes.

Co-authored-by: D3C0Y <decoder-dev@users.noreply.github.com>

Author: decoder-dev

CHANGELOG.md

@@ -6,18 +6,18 @@
 
 ## [Unreleased]
 
-### Fixed
-- **Proxy rotation:** reschedule wait-and-probe while still connecting when no faster proxy is found or cooldown blocks a switch; dispose in-flight probes on settings change.
-
 ## [v12.9.2-3938-pre] — 2026-09-02
 
-Pre-release: WebSocket transport hardening + proxy rotation probe watchdog.
+Pre-release: censorship network stack (proxy rotation, FakeTLS DC fallback, WebSocket hardening).
+
+### Added
+- **Proxy rotation:** Android-style ping-based auto-switch — configurable wait (5/10/15/30/60 s), RTT probe via `MTProxyConnectivity`, switch to fastest live server; timeout picker in Settings → Proxy.
 
 ### Fixed
-- **WebSocket:** handle NWConnection `.cancelled` so MtProtoKit is notified instead of hanging on "Connecting…".
-- **WebSocket:** debounce viability loss (2s, post-`.ready` only) — same policy as direct NWConnection TCP.
-- **WebSocket:** fallback coordinator persists on `Network` across settings re-applies (proxy toggle no longer resets failure count / probe schedule).
-- **Proxy rotation:** 30s watchdog on stuck MTProxy ping probes so `isChecking` cannot block rotation forever.
+- **FakeTLS:** HMAC mismatch on `ee` MTProxy triggers DNS TXT backup → `configSimple` DC fallback (Mozilla DNS after Google); mirrors Android tgnet.
+- **WebSocket:** fallback to direct transport uses `NetworkFrameworkTcpConnectionInterface`, not GCDAsyncSocket.
+- **WebSocket:** handle NWConnection `.cancelled`; debounce viability loss (2s post-`.ready`); persistent fallback coordinator on `Network`.
+- **Proxy rotation:** 30s probe watchdog; reschedule wait-and-probe while still connecting when no faster proxy is found.
 
 ## [v12.9.2-3937-pre] — 2026-09-02
 

submodules/TelegramCore/Sources/Account/Account.swift

@@ -1574,7 +1574,7 @@ public class Account {
             // state `applyWebSocketTransport` gates on) changes, otherwise flipping "WebSocket
             // Transport" in Settings — or enabling/disabling a proxy server while WS transport is
             // on — has no effect until the app is relaunched.
-            network.applyWebSocketTransport(
+            network.updateWebSocketTransportSettings(
                 webSocketTransportEnabled: webSocketTransportEnabled,
                 webSocketFallbackToDirect: webSocketFallbackToDirect,
                 hasActiveProxyServer: hasActiveProxyServer

submodules/TelegramCore/Sources/Network/Network.swift

@@ -536,7 +536,7 @@ func applyWebSocketTransport(context: MTContext, webSocketTransportEnabled: Bool
 }
 
 extension Network {
-    func applyWebSocketTransport(webSocketTransportEnabled: Bool, webSocketFallbackToDirect: Bool, hasActiveProxyServer: Bool) {
+    func updateWebSocketTransportSettings(webSocketTransportEnabled: Bool, webSocketFallbackToDirect: Bool, hasActiveProxyServer: Bool) {
         applyWebSocketTransport(
             context: self.context,
             webSocketTransportEnabled: webSocketTransportEnabled,

submodules/TelegramCore/Sources/State/ManagedProxyFailover.swift

@@ -43,7 +43,7 @@ private func probeProxyRotationServersOnce(network: Network, servers: [ProxyServ
                 }
                 continue
             }
-            let disposable = MTProxyConnectivity.pingProxy(with: network.context, datacenterId: network.datacenterId, settings: settings).start(next: { status in
+            let token = MTProxyConnectivity.pingProxy(with: network.context, datacenterId: network.datacenterId, settings: settings).start(next: { status in
                 lock.lock()
                 if let status = status as? MTProxyConnectivityStatus {
                     if status.reachable {
@@ -61,7 +61,9 @@ private func probeProxyRotationServersOnce(network: Network, servers: [ProxyServ
                     subscriber.putCompletion()
                 }
             })
-            disposables.append(disposable)
+            disposables.append(ActionDisposable {
+                token?.dispose()
+            })
         }
         return ActionDisposable {
             for disposable in disposables {